Legal · All in Touch Ltd
Privacy Policy
Contents
Section 1
Who we are
KinBridge is operated by All in Touch Ltd, a company registered in England and Wales.
Registered address:
All in Touch Ltd
Windsor Court, 11 Tilehurst Road
Reading, RG1 7RA, England
All in Touch Ltd is the data controller for the personal data processed through the KinBridge platform. Our data processor for application hosting and database services is Supabase Inc., who hold and process data on our behalf under a data processing agreement.
For all data protection enquiries, contact us at: theteam@all-in-touch.com
Section 2.
What data we collect for system administration, fraud prevention and data protection
Under GDPR stipulations All in Touch Ltd is the Data Controller.
We collect only the data necessary to provide the KinBridge service. The table below sets out exactly what we collect and why.
| Data type | What it is | Why collected |
|---|---|---|
| Email address | Used for initial authentication, circle invitations, and service notifications | Account creation, login, and transactional emails |
Section 2.2
What data we store on the user's behalf and that you control directly in the app.
Under GDPR stipulations All in Touch Ltd is the Data Controller.
The creator and editor of care recipient personal, health or financial information will explicitly declare confirmation they have consent or authority to collect and share the information
The circle administrator controls the export of any information under the same consent
An audit trail is maintained of consents and exports by user.
We collect only the data necessary to provide the KinBridge service. The table below sets out exactly what we collect and why.
| Data type | What it is | Why collected |
|---|---|---|
| Name | Your display name within KinBridge. Pseudonyms are permitted. | Identifying you within your care circle |
| Care circle content | Updates, feed posts, tasks, and calendar events you create | Delivering the core communication features |
| Role assignment | Your role within a circle (Family Admin, Family, or Carer) | Controlling what content you can access |
| Recipient personal information | Optional fields which are not validated by KinBridge and the User must have care recipient consent to capture: Name, Address, Relationship, Allergies, Personal Preferences, Chronic illness | Continuity of care between caregivers and in case of emergency. A central place for key information. |
| Recipient regular financial commitments | Optional fields which are not validated by KinBridge and the User must have care recipient consent to capture: Purpose of payment, Category, Frequency, Date, Amount, Payment method, Provider name, Contact, Provider reference, Source of payment. | Continuity of financial obligations which would need to be managed in case of dimished capacity or delegated responsiblity. A central place for key information. Financial information specifically EXCLUDES banking information. Fields are available for the receiving organisation references. |
| Care Updates | Optional fields which are not validated by KinBridge and the User must have care recipient consent to capture: Mood, and observations about meals and adhering to medication | Care updates provide a structured way of recording observations of general wellbeing. |
Section 3
How we use your data
We use your data only for the following purposes:
- Providing the service — running your care circle, enabling updates, tasks, calendar events, and messaging between circle members
- Account management — creating and maintaining your account, processing invitations, managing roles
- Service communications — sending transactional emails such as invitation emails, password resets, and account notifications (via Resend, our email delivery provider)
- Security and fraud prevention — protecting accounts from unauthorised access
We do not use your data for advertising, behavioural profiling, or any purpose unrelated to providing and maintaining the KinBridge service.
Section 4
Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract — processing your name, email, and account data is necessary to provide the service you have subscribed to
- Legitimate interests — we have a legitimate interest in maintaining the security of the platform and sending essential service notifications
- Consent — for any optional data you choose to enter, such as care notes or recipient details, you provide this voluntarily
Section 5
Who we share data with
We do not sell your data. We do not share your data with third parties for advertising purposes. We share data only with the following service providers who act as our data processors:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase Inc. | Database hosting, authentication, file storage | All account and circle data |
| Resend | Transactional email delivery | Email address, notification content |
| Stripe | Subscription payment processing | Payment details only — we never see card numbers |
| Expo / EAS | Mobile app build and delivery infrastructure | App binary only — no user data |
We may also disclose data to legal authorities where required by law — for example, in response to a valid court order or to prevent fraud.
Section 6
How long we keep data:
We retain your personal data for as long as your account is active.
1. Your data will be deleted when you close your account from inside the app. You will have the option to download a copy of your data while in the app at any time and when deleting your account. (You can ask your group administrator to do this for you if you are not comfortable doing it.
2. Your data will be deleted within two business days after receiving an email or letter requesting we close and delete your account.
- Account data — retained while your account is active, then deleted within two business days of a verified deletion request
- Circle content (eg. updates, tasks, calendar, expenses, medication, chat) — deleted alongside your account on request, or when the circle is closed by the Family Admin
- Transactional email logs — retained by Resend for up to 30 days as delivery records
- Payment records — retained by Stripe in accordance with their data retention policy and applicable financial regulations
Section 7
How we protect your data
- Encryption in transit — all data between the app and our servers travels over HTTPS/TLS
- Encryption at rest — Supabase encrypts stored data at rest
- Anonymised user id at registration - At registration the user is assigned a unique 32 character id. All other entities and entries have unique 32 character generated ids.
- Role-based access control — circle members can only access data their role permits; no public access to any data
- Invite-only access — circles are closed. No one can join without an explicit invitation from a Family Admin
- Circle isolation — each care circle is completely separated from every other circle at the database level (row-level security)
- No advertising SDK — we use no advertising, analytics, or third-party tracking SDKs in the mobile app
Section 8
Your rights
Under UK GDPR, you have the following rights regarding your personal data. You can exercise any of them by contacting us at theteam@all-in-touch.com.
Right of access
You have total control over your data in the application. You can also request a copy of the personal data we hold about you.
Right to rectification
You have total control over your data in the application. You can also ask us to correct inaccurate or incomplete data.
Right to erasure
You have total control over your data in the application. You can also request deletion of your personal data. We will action this within 30 days.
Right to restrict processing
You have total control over your data in the application. You can also ask us to suspend your access in certain circumstances.
Right to portability
You have total control over your data in the application. You can download your data as .csv format and delete it.
Right to object
Object to processing based on legitimate interests.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Section 9
Requesting deletion of your account and data
You have total control over your data in the application. You can request deletion of your KinBridge account and all associated personal data at any time — including after uninstalling the app.
If you need to submit a deletion request, visit our dedicated deletion page:
Alternatively, email theteam@all-in-touch.com with the subject line "Data Deletion Request" and the email address associated with your account. Or write to us at Deletions, All in Touch Limited, Windsor Court, 11 Tilehurst Road, Reading, RG1 7RA. We will confirm receipt and complete deletion within two business days.
Please note: if you are a member of a care circle, deletion of your account removes your membership and your contributions to that circle. It does not delete other members' data or the circle itself.
Section 10
Children and minimum age
KinBridge is intended for families caring for a dependent. Communication inside of the application is restricted to a single care circle you are a member of. You have to have a paid subscription to have more than one member. The subscription holder is usually the circle administrator and controls the membership.
We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us at theteam@all-in-touch.com and we will delete it promptly.
Section 11
Cookies
The KinBridge mobile app does not use cookies.
The KinBridge website (kinbridge.uk) does not use cookies. We do not use advertising, tracking, or third-party analytics cookies. If we introduce any non-essential cookies in future, we will update this policy and seek your consent before setting them.
Section 12
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (using the address associated with your account) and update the "Last updated" date at the top of this page.
Continued use of KinBridge after notification of a change constitutes your acceptance of the updated policy.
Section 13
Contact us
For any questions about this Privacy Policy or how we handle your data:
- Email: theteam@all-in-touch.com
- Post: All in Touch Limited, Windsor Court, 11 Tilehurst Road, Reading, RG1 7RA
- Phone / Text / WhatsApp:+44 7566 745287
Questions about your data?
We're happy to answer any questions about how KinBridge handles your information.
Email theteam@all-in-touch.com